From critical exploits to the tiniest bug, many security holes receive a tracking number through the US government. The system is being revamped to handle the ever-growing number of bugs, but the cure could create problems of its own.